'about: blank' {Internet,Explorer,hijacked}

I have a problem. When I open Interne Explorer, shows a page called that have in the browser 'about: blank' and not the usual www.msn.com . I couldn't access then to my mails. I have to go to Internet Options ans write it address and safe it, but always open in that page when I start the internet all over again. How I can save the msn site permanently? Excuse my ignorance!

Popular White Paper On This Topic

Goto Internet Options. Click and a box will open. On that box there you will find Address in that you type whatever name of Search Engine you wish. Msn.com or Google.com and click on the right bottom icon, Apply. That will be saved and whenever you click on Internet Explorer icon your Search Engine will open for you.
Regards
Mohammad.

Your browser has been hijacked=2E I usually use CWshredder first, then Spybot Search and Destroy, followed by Adaware=2E you can find these free programs using a google search download them, install them, use them, i feel like a broken record=2E=2E=2E=2E make sure you keep your version of windows up to date using microsoft update=2E=2E=2EI fyou don't have an antivirus program download a free one Antivir is good=2E=2E=2E so is AVG=2E=2E=2E again do a google search and download the free version=2E=2E=2E=2E

You might have to download the software on a friends computer and burn it to a cd=2E Some of the spyware will actually prevent you from downloading the fix=2E=2E=2E
l8tr,
norm

Homepage hijackers are an effect caused by some toolbar programs,
trojans or malware. The hostile application changes the default homepage
of Internet Explorer to something undesired and does not allow the user
to set the homepage.

Below are several tools which can be used to find and remove malware
which causes the effect. Presented here is also a manual step-by-step
method of removing more persistent homepage hijackers.
Please reboot the machine after each step before checking if the removal
was successful.

Spyware / trojan removal tools:
<http://www.spybot.info/> Spybot - Search & Destroy can detect and
remove spyware of different kinds from your computer. Spyware is a
relatively new kind of threat that common anti-virus applications do not
yet cover. If you see new toolbars in your Internet Explorer that you
didn't intentionally install, if your browser crashes, or if you browser
start page has changed without your knowing, you most probably have
spyware.

* Microsoft Recovery Console (an application available on your Windows
installation disc). To access the recovery console run the following
command: D:\i386\winnt32.exe /cmdcons
(Where D should be replaces with the CD driveletter)

Removal Procedure:
There are two application extensions (.dll) files that Need to be
deleted. One is hidden (thanks Akadia!), one is detected with
"HiJackThis.exe"

1) With "Reglite.exe" find name of hidden file:

Double Click on "AppInit_DLLs" located in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Windows\\ The "value" window reveals the hidden file
name. (mine was "hlpl.dll", yours may be different!)

In this example we'll call it "hidden.dll"

Browse to the file, right click it, select Properties. Under the General
tab, uncheck Hidden and Read-Only. Select the Security tab and Check the
'Full control' check box to allow deleting it.
Try deleting the file (Shift + Del or right click and Delete) If it was
impossible to delete the file, continue to step 2. Otherwise skip to
step 3.

2) Rename the hidden file:

Close Windows and reboot using "Windows Recovery Console"
Bwose to the system32 directory located at: C:\Windows\system32\

Replace this path with your system32 dir. In order to know your system32
run cmd and type:
echo %WINDIR%\System32

After finding your system32 directory do the following:

a) Change file from read only by typing attrib -r hidden.dll
b) Rename the file (For some reason this only works after rename) type:
rename hidden.dll nasty.dll
(and remember that "hidden.dll" is for this explanation only use the
name you found earlier)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP =3D
about:blank
(as you can see the second .dll in the example was called "jheckb.dll"
yours may be different) For this example let's call it "obvious.dll".

* Note: As there are MANY variations to this hijacker, the registry
entries might differ from the ones listed above. If the entries are
different, look for entries containing the name of the second dll, in
this example jheckb.dll.

Finally delete the two .dlls ("hidden.dll" and "obvious.dll")

That's it! You should be running again

By the way, if you go offline with Internet Explorer and type OK To
these nasty adware windows you will see the guys who benefit from this
hijacker. Time2Early found:
www.likesurfing.comwww.vn.msie.cc (the real web page)